General

  • Target

    IObeENwjarm5

  • Size

    208KB

  • MD5

    02e8929813570f32ccd84df7363f99cb

  • SHA1

    a753fcf0ff1cdefde8a2dbe6654f94416f30240a

  • SHA256

    180989d6d886af835ae4584b6047fe4887dedb4a875438d0d124f72aaa29caef

  • SHA512

    532d177b9c04d0bd28f0ba14e09a7c97402c9231637e4ba17aae1a97bb32fee6a17f463cfef950d119b74ec94fa51e445dab96d4a6d435275bf566ba88bcbd8a

  • SSDEEP

    6144:kfteTTU4z8LGg+Wih0DuO+H8yv949o6XwIqcBm:KtyTXzyjkKa6yv949o6XwIqam

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjarm5
    .elf linux arm